Privacy Policy

1. Information We Collect

Information you provide

• Address queries: The property addresses you enter when requesting a report. These are used to retrieve flood data from government sources and generate your report.
• Email address: If you contact us directly or sign up for service updates.
• Payment information: Payment is processed by Stripe, a third-party payment processor. We do not store full card numbers, CVV codes, or complete payment credentials on our servers.

Information collected automatically

• Usage data: Pages visited, features used, session duration, browser type, and device type — used to improve the Service.
• IP address: Used for geographic analytics and fraud prevention.
• Cookies and similar technologies: Session management and aggregate analytics. We do not use advertising cookies or cross-site tracking.

2. How We Use Your Information

• To generate and deliver flood data reports for addresses you submit
• To process payments and maintain transaction records (when paid reports are enabled)
• To respond to customer support inquiries
• To improve the accuracy, coverage, and features of the Service
• To detect and prevent fraud and abuse
• To comply with applicable legal obligations

We do not sell your personal information to third parties for advertising or marketing purposes.

3. How We Share Information

We share information only in limited circumstances:

• Service providers: Cloud hosting providers, analytics services, and Stripe (our payment processor) — only as necessary to operate the Service and under written data processing agreements that restrict their use of your data.
• Legal process: If required by law, court order, subpoena, or valid legal process from a government authority with jurisdiction.
• Business transfers: In connection with a merger, acquisition, or sale of substantially all assets. You will be notified via email or prominent notice on our site before your information becomes subject to different privacy terms.

We do not sell, rent, or share your personal information with third parties for their own independent marketing or advertising purposes.

4. Data Retention

• Address queries and report results: Retained for up to 12 months for service improvement and fraud detection, then deleted or anonymized.
• Payment records: Payment records are retained as required by applicable law and standard accounting practice (typically 7 years).
• Email and contact information: Retained until you request deletion or withdraw consent.

5. Your Rights Under the Texas Data Privacy and Security Act (TDPSA)

If you are a Texas resident, you have the following rights regarding your personal data:

• Right to Know: You may request confirmation of whether we process your personal data and obtain a copy of that data.
• Right to Correct: You may request correction of inaccurate personal data we hold about you.
• Right to Delete: You may request deletion of personal data we have collected from you.
• Right to Data Portability: You may request your personal data in a portable, readily usable format.
• Right to Opt Out: You may opt out of the sale of your personal data, processing for targeted advertising, and profiling that produces legal or similarly significant effects. Floodfolio does not currently engage in these activities.
• Right to Appeal: If we deny your privacy request, you may appeal our decision by contacting us. We will respond to appeals within 60 days.

To exercise any of these rights, email [email protected] with subject line "Privacy Request — [Right You Are Exercising]." We will respond within 45 days as required by the TDPSA. We will not discriminate against you for exercising these rights.

6. Security and Breach Notification

We use industry-standard security measures including HTTPS/TLS encryption in transit and access controls on internal systems. No method of transmission over the internet is completely secure. In the event of a security breach affecting your personal data, we will notify affected individuals as required by applicable law, including Texas Business and Commerce Code § 521.053, which requires notification within 60 days of discovery. If you believe your data has been compromised in connection with our Service, contact us immediately at [email protected].

7. Children

Floodfolio is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete it promptly.

8. Third-Party Services and Links

Our Service links to third-party government websites (FEMA, USGS, OpenFEMA) and uses third-party services (Google Maps for interactive map display). We are not responsible for the privacy practices of those services. Review their respective privacy policies before providing information to them.

9. Changes to This Policy

We may update this Privacy Policy at any time by posting the revised policy on this page with a new effective date. For material changes, we will provide additional notice (such as a banner on the site). Continued use of the Service after the effective date constitutes acceptance of the updated policy.

10. Contact

Floodfolio ·[email protected]

For privacy-specific inquiries, include "Privacy" in your subject line.